Skip to content

Commit

Permalink
workflows: Clean IPsec test output
Browse files Browse the repository at this point in the history
[ upstream commit 3c479d4 ]

The test output are riddled with logs such as:

    Defaulted container "cilium-agent" out of: cilium-agent, config
    (init), mount-cgroup (init), apply-sysctl-overwrites (init),
    mount-bpf-fs (init), clean-cilium-state (init),
    install-cni-binaries (init)

This gets particularly noisy when waiting for the key rotation to
complete, during which time we run kubectl exec repeatedly. This commit
fixes it.

Signed-off-by: Paul Chaignon <[email protected]>
Signed-off-by: Tam Mach <[email protected]>
  • Loading branch information
pchaigno authored and aanm committed Feb 18, 2024
1 parent 9cbfa2d commit 6ce6f9a
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 6 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/conformance-ipsec-e2e.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -274,7 +274,7 @@ jobs:
./cilium-cli status --wait
kubectl get pods --all-namespaces -o wide
kubectl -n kube-system exec daemonset/cilium -- cilium status
kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium status
mkdir -p cilium-junits
Expand All @@ -299,7 +299,7 @@ jobs:
# Wait until key rotation starts
while true; do
keys_in_use=$(kubectl -n kube-system exec daemonset/cilium -- cilium encrypt status | awk '/Keys in use/ {print $NF}')
keys_in_use=$(kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium encrypt status | awk '/Keys in use/ {print $NF}')
if [[ $keys_in_use == 2 ]]; then
break
fi
Expand All @@ -311,7 +311,7 @@ jobs:
# By default the key rotation cleanup delay is 5min, let's sleep 4min before actively polling
sleep $((4*60))
while true; do
keys_in_use=$(kubectl -n kube-system exec daemonset/cilium -- cilium encrypt status | awk '/Keys in use/ {print $NF}')
keys_in_use=$(kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium encrypt status | awk '/Keys in use/ {print $NF}')
if [[ $keys_in_use == 1 ]]; then
break
fi
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/tests-ipsec-upgrade.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -314,7 +314,7 @@ jobs:
./cilium-cli status --wait
kubectl get pods --all-namespaces -o wide
kubectl -n kube-system exec daemonset/cilium -- cilium status
kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium status
- name: Start conn-disrupt-test
if: ${{ steps.vars.outputs.downgrade_version != '' }}
Expand All @@ -337,7 +337,7 @@ jobs:
./cilium-cli status --wait
kubectl get pods --all-namespaces -o wide
kubectl -n kube-system exec daemonset/cilium -- cilium status
kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium status
- name: Downgrade Cilium to ${{ steps.vars.outputs.downgrade_version }} & Test (${{ matrix.name }})
if: ${{ steps.vars.outputs.downgrade_version != '' }}
Expand All @@ -353,7 +353,7 @@ jobs:
./cilium-cli status --wait
kubectl get pods --all-namespaces -o wide
kubectl -n kube-system exec daemonset/cilium -- cilium status
kubectl -n kube-system exec daemonset/cilium -c cilium-agent -- cilium status
- name: Fetch artifacts
if: ${{ steps.vars.outputs.downgrade_version != '' && !success() }}
Expand Down

0 comments on commit 6ce6f9a

Please sign in to comment.